This article is part of our Website Stack Guides: CMS, website builders, hosting and forms compared, with prices checked on vendor pages. Want to know where your site stands? Get a free 20–30 page website audit within 24 hours.
A HIPAA-ready form builder costs about $29 to $129 a month for a small practice, because the BAA almost always sits on a higher plan than the "starting at" price. The cheapest plan with a BAA we found was HIPAAtizer at $29 a month billed yearly. The most common price point is around $90 to $130 a month (Zoho Forms Premium, Jotform Gold, Cognito Forms Enterprise).
Every price below was checked on the vendor's own pricing page on 2 November 2026. Prices change, so confirm before you buy. A BAA alone does not make your practice compliant, and this is not legal advice.
The plan that includes the BAA, by vendor
| Vendor | Cheapest plan with a BAA | Billed yearly | Billed monthly | Plans without a BAA |
|---|---|---|---|---|
| HIPAAtizer | Simple Compliance Gold | $29/mo | $34/mo | Free Developer Sandbox |
| IntakeQ | Forms Only (low volume) | Not listed | $29.90/mo | None listed |
| IntakeQ | Forms Only | Not listed | $54.90/mo | None listed |
| Zoho Forms | Premium | $90/mo | $110/mo | Free, Basic, Standard, Professional |
| Jotform | Gold | $99/mo ($1,188/yr) | $129/mo | Starter, Bronze, Silver |
| Cognito Forms | Enterprise | $129/mo | $174/mo | Individual, Pro, Team |
| Formstack | Forms + HIPAA add-on | $83/mo + add-on | $99/mo + add-on | Add-on price not listed |
| FormDr | Complete Plan | Quote only | Quote only | Not applicable |
| Gravity Forms | No vendor BAA | $59/yr license | Not offered | All (vendor will not sign) |
| Paperform | No BAA on any plan | Not applicable | Not applicable | All |
Prices checked on vendor pricing pages on 2 November 2026.
Sources: HIPAAtizer pricing, IntakeQ pricing, Zoho Forms pricing, Jotform pricing, Cognito Forms pricing, Formstack pricing, FormDr pricing, Gravity Forms pricing.
How each vendor ties the BAA to a plan:
- Jotform: the pricing FAQ says HIPAA features are on Gold and Enterprise only.
- Cognito Forms: its HIPAA guide says you must be on Enterprise, not a trial, and the BAA has no extra cost.
- Zoho Forms: its help article limits HIPAA features to Premium and Zoho One, with the BAA requested by email.
- IntakeQ: "HIPAA BAA" is listed on both Forms Only plans, and Practice Management includes all Forms Only features.
- HIPAAtizer: the pricing table ticks the BAA on every paid plan, not on the free sandbox.
- Gravity Forms: its HIPAA documentation says it will not sign a BAA because it does not host your data.
- Paperform: its help center says it is not HIPAA compliant at this time.
Submission and form limits on the BAA plan
The monthly price is only half the story. A cheap plan with a low cap can push you up a tier within months.
| Vendor and plan | Submissions | Forms | Users |
|---|---|---|---|
| HIPAAtizer Gold / Gold Plus / Platinum | 500 / 1,000 / 5,000 a month | 5 / 10 / 50 | Team size 5 / 10 / 50 |
| IntakeQ Forms Only low volume | 10 form submissions a month | Unlimited templates | $10 per extra practitioner |
| IntakeQ Forms Only | Not capped on the page | Unlimited templates | 2 assistant accounts, $20 per extra practitioner |
| Zoho Forms Premium | 150,000 a month | Unlimited | 100 users |
| Jotform Gold | 10,000 a month, 100,000 stored | 100 | Enterprise is the only multiuser plan, per FAQ |
| Cognito Forms Enterprise | Unlimited entries | Unlimited | 20 users, $5 per extra user |
| Formstack Forms | 1,000 per form | 25 | 1 builder user |
Field limits matter too. Zoho's help article says a form can have at most 25 fields that are encrypted or marked ePHI, so a long intake packet may need splitting.
Hidden costs to ask about
- HIPAA add-on pricing (Formstack). The pricing page marks HIPAA as an add-on on Forms and Suite with no public price. Get it in writing.
- Extra users and storage (Cognito Forms). Extra users are $5 each a month. Enterprise includes 100 GB of storage, then $25 a month per extra 50 GB.
- Per-practitioner fees (IntakeQ). $20 per extra practitioner on Forms Only, $30 on Practice Management.
- Storage overflow (Jotform). The FAQ says that when you exceed total submission storage, the oldest response is deleted. Exporting and purging takes staff time.
- Setup and conversion fees (FormDr). Its FAQ lists file conversion at $10 per page and training meetings at $250 each, even though the plan header says free file conversions. Ask which applies.
- Hosting and encryption (Gravity Forms). The plugin license is cheap, but you also need a host that will sign a BAA and an add-on or custom code for encryption at rest. Those costs are not on the plugin's page.
- Yearly lock-in. FormDr says annual plans cancelled in the first six months are non-refundable. Jotform offers a 30-day money-back guarantee instead.
Trials and refunds on the BAA plan
You often cannot test HIPAA mode for free, so the refund policy matters.
| Vendor | Trial or refund terms on its pricing or help page |
|---|---|
| Jotform | No trial of HIPAA features; full refund if you cancel within 30 days of payment |
| Cognito Forms | BAA not available on a trial |
| Formstack | 14-day free trial of Forms; HIPAA access during the trial not stated |
| IntakeQ | 14-day free trial, no credit card, no contract |
| HIPAAtizer | 30-day free trial on paid plans |
| FormDr | Annual plans cancelled in the first six months are non-refundable |
If you cannot trial HIPAA mode, build and test your forms on a non-PHI plan first, then upgrade and sign the BAA before any real patient data comes in.
Worked example: a three-clinician therapy practice
Assume a group practice with three clinicians, one office manager, about 8 forms (intake, consent, release of information, payment policy, and so on) and about 150 submissions a month.
| Option | Plan that fits | Estimated yearly cost |
|---|---|---|
| HIPAAtizer | Gold Plus (10 forms, 1,000 submissions), $39/mo billed yearly | $468 |
| Formstack | Forms at $83/mo billed yearly, plus HIPAA add-on | $996 plus add-on |
| Zoho Forms | Premium at $90/mo billed yearly | $1,080 |
| IntakeQ | Forms Only at $54.90/mo plus 2 extra practitioners at $20 | $1,138.80 |
| Jotform | Gold at $1,188/yr | $1,188 |
| Cognito Forms | Enterprise at $129/mo billed yearly | $1,548 |
Assumptions: the IntakeQ figure treats the base price as covering one practitioner, which is how the "per additional practitioner" pricing reads. Taxes, payment fees and any EHR integration are excluded.
HIPAAtizer is cheapest on paper, but its entry Gold plan (5 forms) would not fit 8 forms, and Gold does not tick payment integrations. IntakeQ costs more than Zoho but includes clinical extras like treatment notes and form reminders. Cognito costs the most but removes submission math completely.
Checklist before you pay
- Confirm the exact plan name that includes the BAA, on the vendor's own page.
- Ask whether the BAA is available during a trial (Cognito says no).
- Count your forms, fields and monthly submissions, then add 50% for growth.
- List every integration that will receive form data and confirm a BAA for each.
- Check how email notifications handle PHI. HHS allows email with patients only with reasonable safeguards.
- Read the refund and cancellation terms for yearly billing.
- Keep a signed copy of the BAA with your compliance records.
For a side-by-side on the three most common choices, read Jotform vs Formstack vs Cognito Forms. For our ranked picks, see the best HIPAA-ready form builders. If you want the form built into a site that converts, our healthcare web design services and contact form optimization guide are a good next step.
Frequently asked questions
What is the cheapest form builder that signs a BAA?
Of the tools we checked, HIPAAtizer's Simple Compliance Gold at $29 a month billed yearly was the lowest, with 5 forms and 500 submissions a month. IntakeQ's low-volume Forms plan is $29.90 a month but allows only 10 submissions a month. Prices were checked on 2 November 2026.
Why is the HIPAA plan so much more expensive than the basic plan?
Most vendors put the BAA, encryption and audit features on their top self-serve tier. Jotform, Cognito and Zoho all follow this pattern. You are paying for the plan, not for the BAA itself: Cognito says there is no extra charge for the BAA beyond Enterprise.
Is there a free HIPAA form builder?
Not among the vendors we checked. The free plans at Jotform, Cognito, Zoho and HIPAAtizer do not include a BAA. Do not collect PHI on a plan without one.
Should I pay monthly or yearly?
Pay monthly for the first few months if you are unsure of your volume, then switch. Yearly billing saves about 13% to 26% on the plans above, but some vendors limit refunds on yearly plans. This is general guidance, not financial or legal advice.
